إرسال #582295: https://gitee.com/chshcms/mccms mccms 2.7 Server-Side Request Forgeryالمعلومات

عنوانhttps://gitee.com/chshcms/mccms mccms 2.7 Server-Side Request Forgery
الوصفThe index () method in MCCMS 2.7 version sys/apps/controllers/api/Gf.php has SSRF, which allows attackers to read arbitrary files or send network requests by constructing pic parameters
المصدر⚠️ https://github.com/caigo8/CVE-md/blob/main/Mccms_V2.7/%E5%89%8D%E5%8F%B0SSRF.md
المستخدم
 huanyue (UID 62942)
ارسال21/05/2025 02:31 PM (11 أشهر منذ)
الاعتدال29/05/2025 10:39 AM (8 days later)
الحالةتمت الموافقة
إدخال VulDB310497 [chshcms mccms 2.7 Gf.php index pic تجاوز الصلاحيات]
النقاط17

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!